PESU OAuth2
OpenID Connect 1.0 Provider

Sign in with PESU.
Privacy-first identity.

The official-grade, unofficial OAuth 2.0 authorization server for student apps, clubs, and developers across PES University.

Zero Password Exposure

Third-party apps receive standard RS256 JWT tokens. They never see, touch, or handle your PESU Academy password.

AES-256-GCM Vault

Delegated client integrations store credentials in an isolated vault using envelope encryption with per-user data keys.

Strict PKCE Required

Every authorization flow mandates Proof Key for Code Exchange (S256), preventing authorization code interception attacks.

Seamless Integration

Standard OIDC. Works with NextAuth, Lucia, and Passport.

Configure your client ID and redirect URI in the portal. Point your library to our discovery document at /.well-known/openid-configuration and start signing in students in minutes.